decentraland / comms-gatekeeper / 24400258316 / 1

84%

main: 85%

Pull #249

github

fix: address PR review findings for bot-presenter-handler

- Fix preview place detection using livekit.isLocalPreview instead of broken string matching
- Set canUpdateOwnMetadata: false for watcher credentials to prevent role spoofing
- Guard getPresenters JSON.parse with try/catch for malformed metadata
- Move NotSceneAdminError from 401 to 403 (authorization, not authentication)
- Skip unnecessary writes in removeFromRoomMetadataArray when nothing changed
- Replace unsafe `as PlaceAttributes` cast with narrow StreamAccessPlace type
- Add null guards before room_id! non-null assertions
- Use randomUUID() instead of Date.now() for identity generation to prevent collisions

1052 of 1422 branches covered (73.98%)

Branch coverage included in aggregate %.

5606 of 6558 relevant lines covered (85.48%)

20.81 hits per line